GHSA-2MHJ-4M6M-6RJ5 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-694X-MWH7-5PVF vulnerabilities

Vulnerabilities for packages: linux-gcp...

SUSE CVE-2026-73071

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, jsondecodeitem in src/json.c can retain a stale pointer after jsondecodestring invokes channelfill to refill and free the current buffer, causing the error path to read freed memory instead of reader-jsbuf +...

SUSE CVE-2026-73508

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord, io.netty.handler.codec.dns.DefaultDnsRecordDecoder.decodeRecord, and io.netty.handler.codec.dns.DnsCodecUtil.decompressDomainName failed to...

EUVD-2026-58515

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

PT-2026-72031

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

PT-2026-72032

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to...

SAP NetWeaver Memory Corruption (3756674)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3756674: - SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose...

RockyLinux 8 : bind9.16 (RLSA-2026:54509)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54509 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field...

The vulnerability in the component drm/panel/panel-simple.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drm/panel/panel-simple.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/net/can/usb/usb_8dev.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/can/usb/usb8dev.c component of the Linux kernel lies in the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the driver/platform/x86/toshiba_haps.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/platform/x86/toshibahaps.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-72054

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...

PT-2026-72076

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The user-space system-call verifier z vrfy z log msg static create in subsys/logging/log msg.c fails to perform mandatory K SYSCALL checks, acting as a...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3602-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3602-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: -...

Exim: Multiple Vulnerabilities

Background Exim is a message transfer agent MTA designed to be a a highly configurable, drop-in replacement for sendmail. Description Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

The vulnerability in the `drivers/target/iscsi/iscsi_target_util.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/target/iscsi/iscsitargetutil.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...